2 ms·
> The whole selling point of Rust is that it's supposed to let you write provably safe code. I disagree. A significant purpose of rust is to encapsulate unsafe
by staticassertion 6y ago
> The whole selling point of Rust is that it's supposed to let you write provably safe code.
I disagree. A significant purpose of rust is to encapsulate unsafe code, and provide safe abstractions. Lots of unsafe code is safe - most of it, even, I'd bet.
- nilkn 6y ago> Lots of unsafe code is safe I mean this with the greatest possible respect, but you replied by simply restating verbatim the quote that I originally responded to, so I'll just point you to my previous post.
- staticassertion 6y agoSorry if I misunderstood your post then.
- SAI_Peregrinus 6y ago`unsafe` the keyword vs unsafe the concept. Lots of `unsafe` code is safe when used through a safe wrapper. Verifying that is the duty of the programmer. The compiler can't prove it, but quite often the programmer can. IMO it's good practice to provide a comment with such proof for every `unsafe` block. So `unsafe` does not imply unsound, but unsound does imply `unsafe`.
- staticassertion 6y agoThis is what I was trying to say. Unsafe doesn't imply exploitability, at all.
- deleted 6y ago[deleted]